aws-dynamodb-stream-record-image
DynamoDB Streams retain old and new item images, which can expose deleted or rotated secrets.
Where it sits
| location | dynamodbstreams:GetRecords.Records[].dynamodb.NewImage / Records[].dynamodb.OldImage |
|---|
| location kind | data_record |
|---|
| data kinds | credential password api_key customer_data pii |
|---|
| emits edge | CanReadData |
|---|
| service | DynamoDB (aws:dynamodb) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | GetRecords |
|---|
| response path | Records[].dynamodb.NewImage / Records[].dynamodb.OldImage |
|---|
| encoding | json |
|---|
| params | {"ShardIterator": "\u003citerator\u003e"} |
|---|
Required permissions
References